AXIS Panoramic Camera P4705-PLVE

From Wiki-IoT
Revision as of 21:26, 26 October 2026 by Jeandecian (talk | contribs) (Jeandecian moved page AXIS P4705-PLVE Panoramic Camera to AXIS Panoramic Camera P4705-PLVE without leaving a redirect)



AXIS Panoramic Camera P4705-PLVE
Security Grade
   
     B
   
Calculator v
AXIS P4705-PLVE Panoramic Camera
   Brand: AXIS (Parent: Canon Inc. (Canon Group))
   Category: IP camera • Model / Gen: AXIS P47 Series P4705-PLVE
   Release Date: 2022-12-14 • Status: In sale
   Classification Date:  • Official Website

Security Evaluation

1. Device Security

Criterion Value Proof Comment
Known hardware tampering Rare [https://www.axis.com/dam/public/45/3c/a1/cve-2023-21414pdf-en-US-412758.pdf

https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/21xxx/CVE-2023-21414.json https://www.axis.com/dam/public/2b/7f/e8/datasheet-axis-p4705-plve-panoramic-camera-en-US-417617.pdf πŸ”— Proof]

CVE-2023-21414 documents a physical-vector secure-boot bypass affecting ARTPEC-8 products on AXIS OS 10.11–11.5. This model uses ARTPEC-8. Fixed in 11.6.94; Rare is a qualitative historical mapping, not an exact-model victim claim.
Known vulnerabilities Rare [https://www.axis.com/dam/public/45/3c/a1/cve-2023-21414pdf-en-US-412758.pdf

https://www.axis.com/dam/public/2b/7f/e8/datasheet-axis-p4705-plve-panoramic-camera-en-US-417617.pdf https://help.axis.com/en-us/axis-os-release-notes-archive πŸ”— Proof]

Historical ARTPEC-8 issue CVE-2023-21414 affected AXIS OS 10.11–11.5 and was fixed in Active Track 11.6.94. This records a concrete disclosed issue, not a claim that current supported AXIS OS remains unpatched.
Prior attacks None [https://help.axis.com/en-us/security-advisories

https://www.axis.com/dam/public/45/3c/a1/cve-2023-21414pdf-en-US-412758.pdf πŸ”— Proof]

No model-specific malicious IoT campaign was identified in the bounded exact-model and Axis-advisory review as of 2026-10-24. Vulnerability research is not counted as an observed in-the-wild attack, and absence from this review does not establish universal absence.
Updatability Very common [https://www.axis.com/products/axis-p4705-plve/support

https://help.axis.com/en-us/axis-p4705-plve https://www.axis.com/products/axis-p4705-plve https://www.axis.com/ko-kr/products/axis-p4705-plve/support πŸ”— Proof]

Axis provides model-specific AXIS OS downloads and recurring active/LTS maintenance releases. Administrators can install supported signed software updates through the web interface or Axis Device Manager. Very common is a qualitative maintenance rating, not a fixed monthly-cadence promise.
Category Score Score: 2 / 3

2. System Security

Criterion Value Proof Comment
Authentication with other systems Partial [https://www.axis.com/dam/public/2b/7f/e8/datasheet-axis-p4705-plve-panoramic-camera-en-US-417617.pdf

https://help.axis.com/en-us/axis-os-knowledge-base πŸ”— Proof]

IEEE 802.1X/EAP-TLS supports certificate-based mutual authentication when a trusted CA, client certificate and key are configured. This is not mandatory for every supported integration; optional legacy and discovery traffic prevent a blanket full-authentication claim.
Communications Encrypted with up-to-date encryption [https://www.axis.com/dam/public/2b/7f/e8/datasheet-axis-p4705-plve-panoramic-camera-en-US-417617.pdf

https://help.axis.com/en-us/axis-p4705-plve https://help.axis.com/en-us/axis-os-web-interface-help πŸ”— Proof]

TLS 1.2/1.3, HTTPS/HSTS and SRTP/RTSPS support modern encryption for configured management and media paths. This rating assumes encrypted services and certificate validation are enabled and plaintext alternatives disabled; discovery traffic is not claimed to be encrypted.
Storage Encrypted with up-to-date encryption [https://www.axis.com/dam/public/2b/7f/e8/datasheet-axis-p4705-plve-panoramic-camera-en-US-417617.pdf

https://whitepapers.axis.com/en-us/axis-edge-vault πŸ”— Proof]

The exact-model datasheet specifies an encrypted filesystem using AES-XTS-Plain64 with 256-bit encryption. Axis describes hardware-protected filesystem keys for persistent read/write data, including configuration. This assessment concerns internal flash data, not merely optional SD-recording encryption.
Category Score Score: 2 / 3

3. User Authentication

Criterion Value Proof Comment
Account management Full [https://help.axis.com/en-us/axis-p4705-plve

https://help.axis.com/en-us/axis-os-web-interface-help πŸ”— Proof]

AXIS OS supports distinct administrator, operator and viewer roles, creation of lower-privilege accounts, password changes, and account deletion. The exact-model manual directs administrators to the AXIS OS account-management interface.
Authentication Basic [https://help.axis.com/en-us/axis-p4705-plve

https://www.axis.com/dam/public/2b/7f/e8/datasheet-axis-p4705-plve-panoramic-camera-en-US-417617.pdf πŸ”— Proof]

Local access uses administrator-created account credentials. Signed OS and secure boot protect software integrity, but are not a second user factor. A physical factory reset clears credentials and configuration, so Basic is the conservative local-authentication mapping rather than an unrestricted Secure claim.
Brute-force protection Exist [https://www.axis.com/dam/public/2b/7f/e8/datasheet-axis-p4705-plve-panoramic-camera-en-US-417617.pdf

https://help.axis.com/en-us/axis-os-knowledge-base πŸ”— Proof]

AXIS OS can temporarily block a client IP after repeated failed HTTP(S) authentication. On 11.5 and later the default example is 20 failed attempts within one second followed by a 10-second block; thresholds are configurable. This is a documented attempt-limiting mechanism, not protection against every distributed attack.
Event logging Access event logged [https://help.axis.com/en-us/axis-p4705-plve

https://help.axis.com/en-us/axis-os-knowledge-base πŸ”— Proof]

The AXIS OS log system can record successful and failed device access. HTTP(S) success logging requires Access Log to be enabled; failed HTTP(S) attempts are logged only for an existing username. Remote syslog is recommended to retain records across resets and reboots.
Passwords Require change after setup [https://help.axis.com/en-us/axis-p4705-plve

https://fehmijaafar.net/wiki-iot/index.php/Methodology πŸ”— Proof]

First access requires creating an administrator account with a personal password; there is no default account on current AXIS OS. The middle label is used for mandatory initial credential provisioning. The model manual does not impose complexity or periodic password-change requirements; recommendations are not treated as enforcement.
Category Score Score: 2 / 3

Technical Specifications

Property Details
Operating System & App AXIS OS (Companion App: AXIS Camera Station Edge / AXIS Camera Station Pro (optional management software))
Hardware (CPU / GPU) CPU: ARTPEC-8 SoC • GPU: Not applicable β€” dedicated ARTPEC-8 video and DLPU processing, not a separate graphics-adapter specification
Memory & Storage Memory: 2048 MB RAM • Storage: 8192 MB Flash; microSD/microSDHC/microSDXC card support; network-attached storage recording
Power, Battery & Charging Battery: Not applicable β€” fixed-installation PoE-powered endpoint • Power: PoE IEEE 802.3at Type 2 Class 4; maximum 17.5 W • Charging: Not applicable β€” powered through PoE, not a rechargeable portable product
Display & Camera Display: Not applicable β€” headless network camera; status LEDs • Camera: 2 Γ— 1/2.8-inch progressive-scan RGB CMOS; 2 Γ— 1920 Γ— 1080; 3.3–8.1 mm varifocal lenses; up to 60/50 fps
Sound & Connectivity Sound: External microphone/line input; digital audio input; network-speaker pairing • Connectivity: RJ45 10/100/1000BASE-T Ethernet with PoE; 3.5 mm mic/line input
Physical (Dimensions & Mass) Dimensions: 88 Γ— 133 Γ— 208 mm (H Γ— W Γ— L) • Mass: 975 g


Evidence checked 2026-10-24. Exact P4705-PLVE hardware with supported, fully updated AXIS OS 12.x. Configuration-dependent rows assess a documented deployable hardened profile: HTTPS and encrypted media, trusted-certificate validation, plaintext services disabled, EAP-TLS where deployed, Access Log plus remote syslog enabled. They do not assert all defaults meet this profile. Historical CVEs are explicitly version-limited. The date field uses a dated official product video, not a claimed first-sale date.